Sun Solaris 'sshd(1M)' Timeout Mechanism Remote Denial Of Service Vulnerability

Bugtraq ID:	37116
Class:	Unknown
CVE:	CVE-2009-4075
Remote:	Yes
Local:	No
Published:	Nov 24 2009 12:00AM
Updated:	Apr 13 2015 09:05PM
Credit:	Sun
Vulnerable:	Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_123 Sun OpenSolaris build snv_122 Sun OpenSolaris build snv_121 Sun OpenSolaris build snv_120 Sun OpenSolaris build snv_119 Sun OpenSolaris build snv_118 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris 0
Not Vulnerable:	Sun OpenSolaris build snv_124

Sun Solaris 'sshd(1M)' Timeout Mechanism Remote Denial Of Service Vulnerability

Sun Solaris 'sshd(1M)' daemon is prone to a remote denial-of-service vulnerability.

Remote attackers can cause the 'sshd' daemon to stop accepting new 'ssh(1)' connections, denying service to legitimate users.

The following are vulnerable:

Solaris 10
OpenSolaris based on builds snv_99 through snv_123

Sun Solaris 'sshd(1M)' Timeout Mechanism Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Solaris 'sshd(1M)' Timeout Mechanism Remote Denial Of Service Vulnerability

Solution:
Vendor updates are available. Please see the references for details.


Sun Solaris 10_sparc

• Sun 143140-01
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-143140-01-1

Sun Solaris 10_x86

• Sun 141525-06
  http://sunsolve.sun.com/search/document.do?assetkey=1-21-141525-06-1

Sun Solaris 'sshd(1M)' Timeout Mechanism Remote Denial Of Service Vulnerability

References:

• Solaris Homepage (Sun Microsystems)
  
• Security Vulnerability in the Timeout Mechanism of Solaris sshd(1M) may Lead to (Sun)